CVE-2025-29803

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

7.3 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.3 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022_sdk:*:*:*:*:*:*:*:*
History

10 Jul 2025, 14:53

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29803 - Vendor Advisory
CPE cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2022_sdk:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:sql_server_management_studio:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_tools_for_applications_2019_sdk:*:*:*:*:*:*:*:*
Summary
  • (es) El elemento de ruta de búsqueda no controlada en Visual Studio Tools para aplicaciones y SQL Server Management Studio permite que un atacante autorizado eleve privilegios localmente.
First Time Microsoft
Microsoft sql Server Management Studio
Microsoft visual Studio Tools For Applications 2019 Sdk
Microsoft visual Studio Tools For Applications 2022 Sdk
Microsoft visual Studio Tools For Applications 2019
Microsoft visual Studio Tools For Applications 2022

12 Apr 2025, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-12 02:15

Updated : 2025-07-10 14:53

NVD link : CVE-2025-29803

Mitre link : CVE-2025-29803

CVE.ORG link : CVE-2025-29803

JSON object : View

Products Affected

microsoft

  • visual_studio_tools_for_applications_2022_sdk
  • visual_studio_tools_for_applications_2022
  • sql_server_management_studio
  • visual_studio_tools_for_applications_2019_sdk
  • visual_studio_tools_for_applications_2019
CWE
CWE-427

Uncontrolled Search Path Element